[Am-info] Microsoft Beta Software Site Hacked

[Fred A. Miller]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Microsoft Beta Software Site Hacked
By Keith Regan

~ Microsoft's password-protected beta test site, where software can be
~ tested before it hits the market, has been hacked, forcing Microsoft to
~ issue new passwords to more than 20,000 members of its developer networks.
~ New versions of .NET, Windows XP and other software were reportedly
~ downloaded without authorization, as were experimental software programs
~ that have not been made public yet.

~ Microsoft emphasized that no source code was compromised in the breach and
~ that the stolen software will be problematic to use and copy as a result.
~ A criminal investigation is under way.

~ --- Black Eye
~ Calls to Microsoft for comment were not returned.

~ Microsoft first revealed the breach to users of its development network,
~ who were issued new passwords in an e-mail message late last week. In the
~ note, Microsoft said original passwords "may have been compromised."

~ Developers gain access to the site by signing in via Microsoft's Passport
~ system. Although Microsoft said the Passport system itself is not in
~ danger, since the beta site is run separately, the latest security breach
~ is another in a string of embarrassing security setbacks for Microsoft.

~ Earlier this month, the software giant revealed the latest security flaw
~ in its Windows operating system: a hole in its Outlook e-mail and planning
~ software that could allow a hacker to gain remote control of a PC.

~ Hocus Focus

~ Security has become a hot topic at Microsoft, with reports indicating
~ chairman Bill Gates personally communicated to all employees the
~ importance of improving security and Microsoft's security image.

~ But Microsoft has released more than 50 security bulletins in 2002, most
~ containing patches or fixes for vulnerabilities in the Internet Explorer
~ Web browser and other Windows-based programs.

~ IDC security analyst Chris Christiansen told NewsFactor that Microsoft
~ likely will be forced to work on two fronts, continuing to repair past
~ software flaws while striving to make future releases more secure. Still,
~ the apparent compromise of the company's own server is an embarrassing
~ development, he noted.

~ "Microsoft is a favorite target of hackers," Christiansen said. "If there
~ are enough of them looking hard enough, they're bound to uncover
~ something."

~ Aberdeen Group analyst Jim Hurley noted that Microsoft may seem to issue
~ more security fixes, but actually has a relatively low rate of flaws given
~ the amount of software it produces each year.

~ Calendar Full

~ Microsoft is slated to announce earnings Thursday afternoon. The company
~ is the latest in a line of tech giants to report in what has been a mixed
~ season.

~ Earlier this week, Microsoft learned that rival Corel had scored another
~ minor victory against it when Gateway announced it would start bundling
~ Corel's office productivity software on some computers, replacing
~ Microsoft's Office suite.

~ Microsoft was also forced to admit it faked an ad on its Web site that
~ purportedly represented a true testimonial from a Mac-to-PC convert.
~ Microsoft admitted the ad was written by a Microsoft marketing person and
~ that an accompanying picture was purchased from a stock photo agency.
- -- Dallam Wych dallam.wyche@virgin.net

- --
"DRM.. Digitally Retarded Media. That's exactly what it is - content
that cannot reach its full potential because of artificial restraints."

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: Using GnuPG with Netscape - http://enigmail.mozdev.org

iEYEARECAAYFAj2w2MkACgkQeNJ3p8sZ/us2RgCZAXhSIsW4j2tyH5dtgveDlk/j
83UAoIu7RwKNlMnvVIygsImhLIkl7xf9
=98OK
-----END PGP SIGNATURE-----